Client Overview
The Challenge
A specialty clinic group that had grown through acquisition had five locations each running their own Active Directory environment. Staff transferring between locations needed to use different credentials depending on where they worked that day. Shared EHR logins were common. The IT team was managing five separate user stores with no central visibility: and HIPAA compliance requirements were increasingly difficult to demonstrate.
- Five separate Active Directory environments with no trust relationships or central management
- Staff working across locations maintained separate credentials for each site
- Shared EHR logins at the front desk: no individual accountability for patient record access
- Deprovisioning unreliable: IT team couldn't guarantee that terminated staff lost access at all five sites simultaneously
- No MFA on EHR, remote access, or cloud-based scheduling systems
- Group-wide HIPAA access audit imminent with no unified access documentation available
What We Did
A 10-week phased Entra ID deployment: one location at a time: to maintain clinical operations throughout the migration.
- All 140+ staff migrated to individual Entra ID accounts: shared credentials eliminated
- MFA enforced across EHR, email, remote access, and scheduling systems
- SSO deployed: staff authenticate once for all approved clinical applications
- Centralized deprovisioning: terminated staff lose access across all 5 sites in under 60 seconds
- Conditional access policies restrict EHR access to approved, managed devices only
- HIPAA access documentation and quarterly review process handed to compliance officer
Results
HIPAA access audit passed. Staff now have one identity that works at any location. IT manages five sites from a single console.
Managing identity across multiple clinic locations?
We specialize in multi-site healthcare IAM: consolidating fragmented environments without disrupting clinical operations.
View IAM ServicesIndustry: Healthcare Cybersecurity | All Case Studies
Resources
Company
Contact
- US: 4752 Euclid Rd Suite 11,
Virginia Beach, VA 23462 - India: Orchard Street, Sector 61,
Gurgaon, Haryana - Phone: (301) 825-5518
- info@garrisonone.com
